This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json) Hash identifier: J02jGbKFqzNPKvOTScI0Zax+bOtJLHC2sfgglR4/B4s= Subject key identifier: 8E:D4:84:ED:A4:0F:D3:BF:5C:54:82:AD:8E:4F:45:0B:A0:E5:B8:9B Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12 Certificate serial: 019B36E9C5F121E9E4650DF55C9D2CEA1735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft Manifest number: 0C94 Signing time: Fri 19 Dec 2025 14:00:48 +0000 Manifest this update: Fri 19 Dec 2025 14:00:48 +0000 Manifest next update: Sat 20 Dec 2025 14:00:48 +0000 Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: S4JVdnPU6HjZS8mq2Pu8vhGOKiJTsGez1PfLxBWULdU=) 2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=) 3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:c5:f1:21:e9:e4:65:0d:f5:5c:9d:2c:ea:17:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12 Validity Not Before: Dec 19 14:00:48 2025 GMT Not After : Dec 20 14:00:48 2025 GMT Subject: CN=8ed484eda40fd3bf5c5482ad8e4f450ba0e5b89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:76:6b:25:e4:68:e1:d9:ea:83:61:50:f2: 7e:bb:85:1b:9b:5a:f4:c8:c8:5b:89:ea:5f:38:43: f1:13:58:50:91:76:b8:b6:ca:bc:a9:4d:d4:ac:24: e7:3d:3d:18:6a:a8:fc:4b:f3:0d:d4:a6:29:9a:61: ef:0c:1a:12:7d:95:24:19:94:30:55:80:f8:21:cc: 37:c3:28:f0:6b:a1:27:43:89:c6:22:48:90:9a:f0: bf:88:6c:ba:6e:57:ed:2f:4e:dd:2d:84:99:51:04: 6d:50:fe:7d:5d:d5:90:7e:ba:1b:ea:ec:09:8c:6e: 43:a9:0a:c4:46:b7:d7:99:c4:90:54:6a:0c:44:00: 47:cb:6f:7c:52:04:da:7c:79:7d:58:e9:7a:60:40: 21:26:b0:59:55:00:eb:05:99:e8:f8:b4:c1:c1:62: 79:20:7f:22:cd:a6:5b:b7:c4:0e:6b:41:05:20:36: 4f:58:35:78:1f:a7:15:e9:7a:e1:66:8b:a4:cf:83: f7:9f:30:27:ce:cb:51:7f:40:5a:43:3c:1f:3c:5b: 43:73:3b:27:7a:23:f1:ae:c6:b9:f8:76:16:5a:5b: 62:49:6b:1a:e0:53:49:d1:40:3c:68:1b:92:8d:f1: 16:39:62:0f:17:c4:1c:b1:c3:44:f4:80:b1:28:4e: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:84:ED:A4:0F:D3:BF:5C:54:82:AD:8E:4F:45:0B:A0:E5:B8:9B X509v3 Authority Key Identifier: keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:90:05:f6:3f:86:73:20:7d:6a:fa:4b:b7:f3:1c:37:71: 17:5f:e4:78:6c:35:b4:79:2e:51:59:11:94:45:dd:f5:6e:58: b2:fa:d9:5d:36:fb:40:5c:87:df:52:e7:94:84:97:5e:f4:94: 51:82:65:c2:3d:48:bc:92:7f:27:01:d1:ca:c9:d0:9c:46:f4: 89:18:33:c9:6e:5c:6b:bd:5f:50:18:45:f1:7c:47:ce:dc:ef: 68:6f:a8:96:6c:b0:85:5b:36:fa:ba:2b:41:a7:03:13:ab:aa: 48:ac:cf:59:d6:c9:57:c7:c2:66:b3:69:57:01:12:d9:d3:e0: 9f:ca:de:4d:66:89:96:98:e9:bd:ff:dc:35:b8:d6:03:44:3f: 63:bd:8c:17:63:c7:19:62:34:13:dd:d1:e1:17:29:57:78:0a: 32:18:84:ed:6c:8e:cb:29:ef:be:c2:8e:ce:71:42:70:7e:df: 03:37:cc:f6:5e:c3:e0:ad:ec:a4:7a:f8:32:1a:e4:9e:cf:b0: 55:ea:34:d6:e2:60:de:6f:4a:ec:41:61:f3:02:4c:8b:b1:9e: 43:bf:71:13:3d:44:7a:bc:5a:59:23:48:98:7d:d9:9f:8e:08: a1:69:54:78:cd:d8:e4:43:09:c8:3a:92:ff:24:93:af:84:8f: b8:53:3d:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26cXxIenkZQ31XJ0s6hc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2 NjlmMTIwHhcNMjUxMjE5MTQwMDQ4WhcNMjUxMjIwMTQwMDQ4WjAzMTEwLwYDVQQD Eyg4ZWQ0ODRlZGE0MGZkM2JmNWM1NDgyYWQ4ZTRmNDUwYmEwZTViODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniZ2ayXkaOHZ6oNhUPJ+u4Ubm1r0 yMhbiepfOEPxE1hQkXa4tsq8qU3UrCTnPT0Yaqj8S/MN1KYpmmHvDBoSfZUkGZQw VYD4Icw3wyjwa6EnQ4nGIkiQmvC/iGy6blftL07dLYSZUQRtUP59XdWQfrob6uwJ jG5DqQrERrfXmcSQVGoMRABHy298UgTafHl9WOl6YEAhJrBZVQDrBZno+LTBwWJ5 IH8izaZbt8QOa0EFIDZPWDV4H6cV6XrhZoukz4P3nzAnzstRf0BaQzwfPFtDczsn eiPxrsa5+HYWWltiSWsa4FNJ0UA8aBuSjfEWOWIPF8QcscNE9ICxKE7/NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7UhO2kD9O/XFSCrY5PRQug5bibMB8GA1UdIwQY MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgieQBfY/ hnMgfWr6S7fzHDdxF1/keGw1tHkuUVkRlEXd9W5YsvrZXTb7QFyH31LnlISXXvSU UYJlwj1IvJJ/JwHRysnQnEb0iRgzyW5ca71fUBhF8XxHztzvaG+olmywhVs2+ror QacDE6uqSKzPWdbJV8fCZrNpVwES2dPgn8reTWaJlpjpvf/cNbjWA0Q/Y72MF2PH GWI0E93R4RcpV3gKMhiE7WyOyynvvsKOznFCcH7fAzfM9l7D4K3spHr4Mhrkns+w Veo01uJg3m9K7EFh8wJMi7GeQ79xEz1EerxaWSNImH3Zn44IoWlUeM3Y5EMJyDqS /ySTr4SPuFM9mA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:49:06 2025 by rpki-client